AFS and Kerberos 5

Ben Staffin staffin at uiuc.edu
Tue Jul 22 15:10:38 EDT 2003


On Tue, Jul 22, 2003 at 09:03:09AM -0700, MattW wibbled:
> Esteemed Kerberos Peers,
> 
> I am trying to set up AFS and authenticate with my Kerberos 5 KDC
> (AFS on RedHat, KDC on debian linux)
> 
> My question today is:
> 
> Can I leave my Kerberos 5 KDC in pure Kerb 5 mode or
> do I have to run some kind of Kerb 5-to-4 daemon to
> issue kerb 4 tickets to the AFS server - I'd like
> to be pure kerb 5 if possible.
> 
You can either run krb524d on a KDC, or on a separate machine that has
access to the master AFS ticket, or you can use Doug Engert's gssklogd
running on an AFS database server, which will allow you to use purely
krb5.  However, most installations run krb524d.

-- 
/--
| Ben Staffin
  gpg key: offline due to stupidity            |
                                             --/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mailman.mit.edu/pipermail/kerberos/attachments/20030722/ec0f0e9d/attachment.bin


More information about the Kerberos mailing list